Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7Epwb0eksqzQI8okH1GMFfPmTaA.roa
File: 7Epwb0eksqzQI8okH1GMFfPmTaA.roa (raw, json)
Hash identifier: 4VBczVELhSrErQp+q7zJ5m6TyId49TqVoU37hq89zuw=
Subject key identifier: EC:4A:70:6F:47:A4:B2:AC:D0:23:CA:24:1F:51:8C:15:F3:E6:4D:A0
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018E6141C987599C401E83EB498C6DA65B49
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7Epwb0eksqzQI8okH1GMFfPmTaA.roa
Signing time: Thu 21 Mar 2024 13:44:45 +0000
ROA not before: Thu 21 Mar 2024 13:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 78.159.131.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:41:c9:87:59:9c:40:1e:83:eb:49:8c:6d:a6:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 21 13:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec4a706f47a4b2acd023ca241f518c15f3e64da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:be:09:1a:06:23:bb:02:78:65:30:82:fb:
9d:fe:a1:d9:70:09:8f:5c:38:73:1d:cf:7f:b8:60:
eb:4d:4b:aa:5a:5b:01:63:17:be:74:90:e8:72:c6:
6a:8a:4a:e5:fc:9b:72:82:3a:a2:79:d7:39:4e:ed:
18:01:54:95:3a:df:14:e8:3c:6f:f2:4c:34:09:16:
7a:66:d6:ac:15:c4:1a:d5:64:80:fe:98:05:06:5b:
eb:f0:cf:e9:e4:42:ae:d7:d8:7e:57:bc:9a:b3:3b:
4f:e6:2b:df:41:c5:a0:7c:48:37:d8:95:7f:16:24:
c1:fc:5f:2a:de:47:ce:e9:4c:a2:0d:e1:83:db:60:
9d:b3:82:43:f4:64:cc:76:23:ac:ec:69:e8:5e:97:
de:ba:31:ea:de:31:ee:ca:04:9d:0b:02:1e:1d:ae:
82:b4:61:00:78:a9:72:ab:85:61:01:e1:3a:e4:da:
19:86:89:c9:d3:65:8f:c9:04:43:12:94:d4:0b:4d:
08:ef:6d:ad:de:99:c0:a0:24:3a:4a:1a:3b:fd:d5:
6a:38:23:b2:5a:59:c6:76:c1:e4:73:91:a4:98:4e:
88:86:3b:e7:7d:41:93:86:23:fa:03:f7:f9:56:d5:
8f:de:8e:3c:41:07:a9:1c:6b:be:8c:51:51:2e:16:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4A:70:6F:47:A4:B2:AC:D0:23:CA:24:1F:51:8C:15:F3:E6:4D:A0
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/7Epwb0eksqzQI8okH1GMFfPmTaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a3:02:26:71:b1:9d:64:1e:20:55:cc:b5:4c:7f:16:42:ab:
cc:6f:b9:07:c3:2b:88:41:fa:3a:f0:6c:9e:dc:d3:c3:74:41:
13:96:d9:d0:eb:dc:3a:07:22:bd:b2:9f:81:60:f6:6d:98:fc:
06:8b:69:c4:a6:74:00:be:d2:da:00:5b:1b:7c:e1:e9:70:bc:
eb:f7:2d:75:aa:4b:92:0d:75:f4:a1:f8:6c:67:3a:d8:bc:c4:
55:7c:00:0e:cc:b4:19:e0:0f:af:23:01:c8:36:8d:e2:78:c2:
1e:f7:4b:94:79:0b:76:af:47:47:90:ac:21:0b:ac:f5:60:9a:
06:ab:c0:32:15:57:32:27:95:72:26:a6:f9:9b:70:9a:93:d0:
5c:3c:9a:e0:67:24:93:51:3a:94:9e:c8:b6:00:5d:e8:f8:a2:
6a:06:8f:07:ae:e5:70:3d:74:a9:ab:d9:c9:89:b0:c7:9a:e9:
4b:e0:9f:29:32:b3:8b:a2:72:10:91:42:f9:32:34:b3:0e:55:
3c:ad:24:4c:09:dd:9e:b6:b4:df:fc:38:41:a2:5c:78:96:36:
e4:d7:57:5e:63:ca:8a:d7:79:18:e7:ee:07:f5:b9:2e:ef:32:
ca:87:3c:81:68:d1:ee:b6:e5:d7:62:f0:2b:12:a8:e4:4a:e5:
7a:42:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:59:39 2024 by rpki-client on console-ams.rpki-client.org